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1 In the Claims: 

2 Cancel Claims 1-14 and add the following new Claims lji 
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n \. Xs. (New) A system for using a shared key to transmit secure data 

2 \ between a client and a server, the system comprising: 

3 \n encrypt/decrypt engine for using the shared k^y to encrypt. 

4 \ or decrypt data, the encrypt/ decrypt engine! being 

5 \configured for delivery via a web page to a cjUent in 

6 response to a user request and further configured to 

7 encrypt data independently of an identity o(the physical 

8 client; \ \ 

9 wherein the serverShicludes a user private keys database 
10 configured to sWe the shared key. And, wherein, it is 

/\\ possible for the client and the server to resijie on the same 

12 physical computing device. j 

1 16. (New) The system of claim 15 wherein the shared key is a user's 

2 private key entered by a user into thAweb page, j 

1 17. (New) The system of claim 15 further comprising ajsecure data 

2 database configured to store data received frWi the client and, 

3 upon the completion of a processing step, to delw^r the stored 

4 data in an encrypted format to the client or to another client. 

1 18. (New) The system of claim 15 further comprising ajsecure data 

2 database configured to store data received from the clientimd, 

3 upon receipt of a request for the data, to deliver tljie stored data 

4 in an encrypted format to the client or to another jclient. \ 
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1 I©. (New) The system of claim 15 wherein the shared kjsy is 

2 \ transmitted between the server and the client as fpw as zero 

3 \imes and the shared key is transmitted between user and 

4 the server as few as one time. The key is not sent for 

. 5 authentication purposes, rather, the effect of the iey in the 

6 encryption process is sent. Consequently, the shared key does 

7 not needtp be retransmitted once it has been established. 

^/j 20. (New) The systtsm of claim 15 wherein the shared kjey is a user's 

2 private key entered by a user. ; 

1 .21. (New) The system of dlaim 15 wherein the client encrypt/ decrypt 

2 engine is installed on the client. \ 

1 722. (New) A system for using a Shared key in transmitting secure 

2 data between a client and a server, the system corhprising: 

3 an encrypt/ decrypt engink for using the shared key in 

; 4 encrypting data, the encrypt/ decrypt engine being configured to 

5 encrypt data independently of an identity of the physical client; 

6 and \ 

7 a user private keys database located on the jserver and 

8 configured to store the shared key, the shared ke# being the 
: 9 private key of a user. \ 

1 . 23. (New) The system of claim 22 wherein the sender is jconflgured to 

2 decrypt encrypted data received from the clienf\us|ing the shared 

3 key and to use a private server key, known only b\ the server, to 

4 re-encrypt the. decrypted data. \ 
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. .1 24.. (New) The system of claim 23 further comprising a secure data 

2 \ database configured to store the encrypted data received from 

3 \ the client and re-encrypted by the server and to deliver the 

4 \tored data to the client or to another client; the delivered data, 

5 after the completion of a processing step, being encrypted with 
j& the Glared user key or with another shared user key. 

1 25. (New) Th\ system of claim 23 further comprising a secure data 

2 database Configured to store the encrypted data received from 

3 the client an& re-ericrypted by the server and to deliver the 

4 stored data to the client or to another client; the djelivered data 

5 being, upon receiW of a request for the data, encrypted with the 

6 shared user key or with another shared user key. j 

1 26. (New) The system of claftn 25 wherein the request ip» from the 

. 2 user. \ j 

1 27. (New) The system of claim 25Vherein the request is from an 
2. other user. \ 

.1 /28. (New) A system for using a shared key in transmitting secure 

2 . data between a client and a server, the systemVoihprising: 
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an encrypt/decrypt engine for using the shared key 
entered by a user to encrypt data entered by the -u|ser, the 
encrypt/ decrypt engine being configured such that all data 
entered \y the user and stored on the client is stored in 
encryptedvform, and further configured to encrypt; data 
independently of an identity of the physical client;; the shared 
key entry being the responsibility of the user and pot the client; 

the servfer including a user private keys database 
configured to stbre the shared key, the shared keyj being a 
private key of a user, and not a physical client. 

29. (New) The system okclaim 28, wherein the encrypt/ decrypt 

engine uses a symmetric key encryption/ decryption algorithm 
for encrypting and deWpting data. = 

30. (New) The system of claim 28, further including a Web server 

engine configured for theViser to securely send or jreceive data 
from the client to the serve 



1 /3 1. (New) A method for using a shared Ifey in receiving jsecure data 

2 on a server, comprising the steps < 

3 delivering from a server to a client a web pa&e including 
.4 an encrypt/ decrypt engine; 

5 encrypting data on the client usingk the encrypt/ decrypt 

6 engine and a shared key entered by a usekof the client, the 
.7 shared key being shared between the user and the server; 

8 delivering the encrypted data from the client to the server; 

9 receiving the. encrypted data at the servei 
10 decrypting the encrypted data at the serverNusing the 

1.1 shared key; and 
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i2 ^\ processing the decrypted data. : 

1 32. \ew) The method of claim 31, wherein the step of processing the 

2 decrypted data includes the steps of: 

3 \ encrypting the decrypted data with a privafcf server key; 

4 and\ 

5 Vtoring the encrypted data in a database. 

. (New) ThV method of claim 31, wherein the step of processing the 
decrypted\data includes the steps of: 

X 3 re-enVypting the data with an other user's private key 

\V . 4 shared between the other user and the server; an£ 

5 sending the re-encrypted data to the other ijiser. 

1 34. (New) The metJiodVf claim 31, wherein the step of processing the 

2 decrypted data includes the steps of: 

3 decrypting theiencrypted data with the private server key; 

4 re-encrypting theydata with a second user's jkey shared 

5 between the second uservand the server; and 

6 sending the re-encrypted data to the seconcj user. 

1 35. (New) The method of claim 3\, wherein the step of processing the 

2 decrypted data includes the steps of: 

3 processing the data according to an instruction of the 

4 user; \ 

5 re-encrypting the processed\data using the juser's shared 

6 key; and \ i 

7 sending the re-encrypted processed data tojthe user. 

1 36. (New) The method of claim 31, wherein the step of ^processing the 

2 decrypted data includes storing the decrypted datia in a secure 
. 3 . database. \ ; 
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1 / 37\(New) A computer-readable medium comprising program 

2 \instructions for causing a computer system to us£ a shared key 

3 ib receiving secure data at a server, by the steps cif: 

\ i 

\ delivering a web page from the server to a client, the web 
pageuncluding an encrypt/ decrypt engine and beiing configured 
to useNthe encrypt/decrypt engine and a shared kby entered by 
a user of the client to encrypt data on the client, the shared key 
being shatad between the user and the server; 

receiving the encrypted data at the server; ; 



10 decrypting the encrypted data using the shared key; and 

1 1 processing^ the decrypted data- j 

1 /&8. (New) A computer-readable medium comprising program 

2 instructions for causmg a computer system to receive secure 

3 data on a server using \ shared key, by the steps of; 

\ » 

4 delivering an encrypt/ decrypt engine from the server to a 

5 client, the encrypt/ decrypt engine being configured to use a 

6 shared key entered by a user \>f the client to encrypt data on the 

7 client, the shared key being shared between the ujser and the 

8 server and the encryption being independent of a4 identity of 

9 the physical client; \ 

10 receiving the encrypted data at\he server; ; 

\ i 

1 1 decrypting the encrypted data using the shared key; and 

12 processing the decrypted data. \ 



PAGE 21/33 * RCVD AT 1212412003 1 1 ;W;34 AM [Eastern Standard Time] 1 SVRiUSPTO-EFXRF-1/0 * DN1S:8729306 1 CSID!?505493751 * DURATION (mm-ss):11«34 




12/24/2083 09:17 



2505493751 



ULTRA INFO SYSTEMS 



PAGE 22 




1 

2 
3 

1 
2 
3 



1 

2 

3 
4 
5 
6 
7 

8 



1 
2 

3 
4 

5 
6 
7 



35. {New) The computer readable medium of claim 38, further 
comprising program instructions for causing the processed 

Vdecrypted data to be re-encrypted using a private Server key. 

\ •■ i 

\ ■ ' 

•40. (New The computer-readable medium of claim 39, jfurther 
comprising program instructions for causing the processed 
decrypted data to be stored in a secure database, j 

\ ! 

\ ! 

41. (New) The\omputer-readable medium of claim 38, j wherein 
processingVhe decrypted data includes the steps pf: 

re-encWptirig the data with the private server key; 

storing the re-encrypted data; j 

decrypting the stored data with the private server key; 

encrypting the data with a second user's kejy shared 
between the second\user and the server; and 

sending the encrypted data to the second xxker. 



42. (New) The computer-readkble medium of claim 38, wherein 
processing the decrypted data includes the steps of: 

processing the data according to an instruction of the 

user; 

encrypting the processedvdata using a shared key; and 
sending the encrypted processed data to the user or to 
another user. 

1 /43. (New) A method of using a shared key in transmitting secure data 

2 between a client and a server using k shared key,! comprising 

3 . the steps of: 



4 

5 



encrypting data using the shared key with an 



encrypt/decrypt engine configured to encrypt data 
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independently of an identity of the physical client, jthe shared 
key Being entered by a user of the client; 

-livering the encrypted data from the client; to the server; 
receiving the encrypted data at the server; j 
decrypting the encrypted data at the server \jising the 
shared key,\he shared key being stored in a user private keys 
database; anc 

processing the decrypted data. 

1 44. (New) The methodVf claim 43, wherein processing the decrypted 

2 data includes the steps of: 

3 encrypting the\decrypted data with a private; server key; 

4 and 

5 storing the encrypted data in a database. 

1 45. (New) The method of claim 43, wherein the step of processing the 

2 decrypted data includes the^steps of: 

3 encrypting the data with an other user's private key 

4 shared between the other user and the server; and 

5 sending the encrypted data to the other user. 

1 46. (New) The method of claim 43, whe\ein the step of processing the 

2 decrypted data includes the steps 

3 decrypting the re-encrypted data with the private server 

4 key; 

5 encrypting the data with a second user's key shared 

6 between the second user and the serverjyand 

7 sending the encrypted data to the second u^er. 



1 47. (New) The method of claim 43, wherein the stej> of processing the 

2 decrypted data includes the steps of; 
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processing the data according to an instruction of the 

user; 

re-eri^rypting the processed data using the [user's shared 
key; and 

seeding the re-encrypted processed diata to the 

user. 
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